Refactor module to use IAM policy document instead of JSON templating
See https://github.com/trussworks/terraform-aws-logs#upgrading-from-600-to-7xx for upgrading to 7.0.0
See https://github.com/trussworks/terraform-aws-logs#upgrading-from-600-to-7xx for upgrading to 7.0.0